This patch fixes an out-of-bounds read in the RV60 decoder where qp can
reach 65, exceeding the rv60_qp_to_idx[64] array bounds. The previous fix
(61cbcaf93f) only covered intra frames. This adds validation at the source
for all frame types.
0001-avcodec-rv60dec-add-upper-bound-check-for-qp.patch
Nov 07, 2025 at 10:19:27PM +0100, Reaxx via ffmpeg-devel wrote:
> > Thanks for reviewing and applying the patch. Apologies for the incorrect
> > commit message , I appreciate you correcting it. Thanks again
>
> actually, can you check if my commit message is corre
6:20:38PM +0100, Reaxx via ffmpeg-devel wrote:
> > This patch fixes an out-of-bounds read in the RV60 decoder where qp can
> > reach 65, exceeding the rv60_qp_to_idx[64] array bounds. The previous fix
> > (61cbcaf93f) only covered intra frames. This adds validation at the
This patch fixes an out-of-bounds read in the RV60 decoder where qp can
reach 65, exceeding the rv60_qp_to_idx[64] array bounds. The previous fix
(61cbcaf93f) only covered intra frames. This adds validation at the source
for all frame types.
0001-avcodec-rv60dec-add-upper-bound-check-for-qp.patch
